medium6.1
CVE-2020-36202
Async-h1 request smuggling possible with long unread bodies
Impact
An issue was discovered in the async-h1 crate before 2.3.0 for Rust. Request smuggling can occur when used behind a reverse proxy.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| rust | async-h1 | < 2.3.0 | 2.3.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rust-Lang | Async-H1 | before 2.3.0 |